9cbf8fb766
[Detail] System processes have no permission to access vendor_default_prop [Solution] Add get vendor_default_prop rule for system processes MTK-Commit-Id: ad4fb4d8ae4fb38767c16b82ce9d8351f5f59702 Change-Id: I31cf13db6b50a3cff193aa0a34bc1130e5b18942 CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
29 lines
773 B
Plaintext
29 lines
773 B
Plaintext
# ==============================================
|
|
# MTK Policy Rule
|
|
# ============
|
|
|
|
# Date : WK14.37
|
|
# Operation : Migration
|
|
# Purpose : for opetator
|
|
allow bootanim bootani_prop:property_service set;
|
|
|
|
# Date : WK14.46
|
|
# Operation : Migration
|
|
# Purpose : For MTK Emulator HW GPU
|
|
allow bootanim qemu_pipe_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow bootanim proc_ged:file {open read write ioctl getattr};
|
|
|
|
# Date : WK17.43
|
|
# Operation : Migration
|
|
# Purpose : For MTK perfmgr
|
|
allow bootanim proc_perfmgr:dir {search read};
|
|
allow bootanim proc_perfmgr:file {open read ioctl};
|
|
|
|
# Date : WK18.20
|
|
# Operation : Migration
|
|
# Purpose : no permission for vendor_default_prop
|
|
get_prop(bootanim, vendor_default_prop)
|